This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/BbqP_agnvXa4OJUdOK9QaQVVfQE.roa File: BbqP_agnvXa4OJUdOK9QaQVVfQE.roa (raw, json) Hash identifier: BytDPBfW+z3MMKn/T3Ezt+s/7on4WxSdnNftScXHcMg= Subject key identifier: 05:BA:8F:FD:A8:27:BD:76:B8:38:95:1D:38:AF:50:69:05:55:7D:01 Certificate issuer: /CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Certificate serial: 019B7E38DC4381F1F57DD96BAFD94AECDE83 Authority key identifier: A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/BbqP_agnvXa4OJUdOK9QaQVVfQE.roa Signing time: Fri 02 Jan 2026 10:20:14 +0000 ROA not before: Fri 02 Jan 2026 10:20:14 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 397228 IP address blocks: 37.209.192.0/24 maxlen: 24 37.209.194.0/24 maxlen: 24 37.209.196.0/24 maxlen: 24 37.209.198.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.mft rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7e:38:dc:43:81:f1:f5:7d:d9:6b:af:d9:4a:ec:de:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a5ae8a3d8bdaabf4765fda79d55eca8c69c8bf2c Validity Not Before: Jan 2 10:20:14 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=05ba8ffda827bd76b838951d38af506905557d01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ae:9e:b2:cc:ed:4a:c7:ab:98:9f:af:14:b2: 3e:8f:55:32:d1:34:1a:7a:fa:97:32:33:67:9d:92: 67:c4:22:df:36:06:e4:ea:74:b7:d0:83:de:9e:f7: c1:7b:67:c1:1b:0d:8d:6b:37:02:0f:75:3d:60:2f: 48:cd:2d:c1:fa:b4:17:7b:2e:25:a0:33:2f:db:02: 8c:29:e1:1d:e8:50:e2:e2:11:eb:24:93:a7:8a:ce: 5a:18:29:04:1f:b1:c4:8a:0d:87:70:86:e7:10:d3: f0:23:d7:61:d7:01:7c:20:5d:02:44:95:84:8f:40: 44:17:f9:81:08:02:2c:37:45:55:7e:f8:92:37:44: 5b:52:57:80:dd:6f:04:06:ca:58:3e:57:c5:cc:9c: ad:6b:06:eb:ab:31:7a:47:8e:e3:bf:bc:96:dc:6f: 68:e5:b8:da:6a:d6:da:86:87:60:bd:bc:71:d8:d0: 95:3f:e8:3b:a5:8b:2f:96:0e:c6:b1:20:59:cb:57: 7e:df:bf:1a:ca:db:b9:3f:66:b8:62:a7:95:66:72: 84:70:41:7a:80:23:2f:82:03:dc:e3:e5:2f:1b:7f: e0:ea:ca:18:22:5f:b6:20:05:e8:27:e0:e2:b0:ba: 8f:8e:5f:08:65:1d:9a:77:3b:49:4b:3d:4b:5b:fa: 94:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:BA:8F:FD:A8:27:BD:76:B8:38:95:1D:38:AF:50:69:05:55:7D:01 X509v3 Authority Key Identifier: keyid:A5:AE:8A:3D:8B:DA:AB:F4:76:5F:DA:79:D5:5E:CA:8C:69:C8:BF:2C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pa6KPYvaq_R2X9p51V7KjGnIvyw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/BbqP_agnvXa4OJUdOK9QaQVVfQE.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/0d280c-9d88-4aea-b521-416f85ee237b/1/pa6KPYvaq_R2X9p51V7KjGnIvyw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 37.209.192.0/24 37.209.194.0/24 37.209.196.0/24 37.209.198.0/24 Signature Algorithm: sha256WithRSAEncryption 25:2b:0d:51:31:21:17:92:b2:3f:a5:b5:c1:9a:ac:79:6d:d4: 9d:a5:10:14:50:e8:02:6d:b0:b4:63:b3:61:54:ff:a4:5e:22: 1e:16:32:48:ff:c6:c6:ed:69:3f:d3:fc:d4:c7:c3:ea:29:8d: a3:e9:ae:ba:1e:b0:75:b8:f2:dc:75:a3:e9:47:15:ac:f4:5e: d5:39:10:0b:1d:88:2f:ee:c7:fb:26:52:49:e5:1d:8e:d7:59: 44:9c:4e:c8:8f:c0:db:f5:e4:a0:30:1c:5b:64:aa:27:01:68: 4a:7a:bc:7e:41:6c:39:0c:7a:f1:93:f1:48:92:1f:b4:f8:bd: f7:53:9c:08:8a:36:81:06:0a:bc:30:c9:28:13:6a:0b:80:a7: 5b:c3:07:90:c9:24:95:21:38:52:24:91:45:8a:15:41:b4:84: 87:83:40:74:1a:f9:5d:f7:b9:c6:b0:d3:ac:4d:4e:f4:f8:6a: 54:32:98:3b:d5:1e:cf:2e:30:ec:00:b2:22:2e:62:0c:de:98: eb:f4:7c:8e:f8:de:d6:0d:e3:c4:31:a0:a7:c8:17:bf:c7:54: 71:3b:b8:07:37:3d:f7:23:55:2b:e5:f7:ed:81:f1:41:6c:26: cb:ca:5f:47:6c:af:83:17:e5:7e:75:e1:27:94:4c:53:93:d6: 84:27:2a:a6 -----BEGIN CERTIFICATE----- MIIFDzCCA/egAwIBAgISAZt+ONxDgfH1fdlrr9lK7N6DMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE1YWU4YTNkOGJkYWFiZjQ3NjVmZGE3OWQ1NWVjYThjNjlj OGJmMmMwHhcNMjYwMTAyMTAyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygwNWJhOGZmZGE4MjdiZDc2YjgzODk1MWQzOGFmNTA2OTA1NTU3ZDAxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw66essztSsermJ+vFLI+j1Uy0TQa evqXMjNnnZJnxCLfNgbk6nS30IPenvfBe2fBGw2NazcCD3U9YC9IzS3B+rQXey4l oDMv2wKMKeEd6FDi4hHrJJOnis5aGCkEH7HEig2HcIbnENPwI9dh1wF8IF0CRJWE j0BEF/mBCAIsN0VVfviSN0RbUleA3W8EBspYPlfFzJytawbrqzF6R47jv7yW3G9o 5bjaatbahodgvbxx2NCVP+g7pYsvlg7GsSBZy1d+378aytu5P2a4YqeVZnKEcEF6 gCMvggPc4+UvG3/g6soYIl+2IAXoJ+DisLqPjl8IZR2adztJSz1LW/qUywIDAQAB o4ICGzCCAhcwHQYDVR0OBBYEFAW6j/2oJ712uDiVHTivUGkFVX0BMB8GA1UdIwQY MBaAFKWuij2L2qv0dl/aedVeyoxpyL8sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEt NDE2Zjg1ZWUyMzdiLzEvQmJxUF9hZ252WGE0T0pVZE9LOVFhUVZWZlFFLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8wZDI4MGMtOWQ4OC00YWVhLWI1MjEtNDE2Zjg1ZWUyMzdi LzEvcGE2S1BZdmFxX1IyWDlwNTFWN0tqR25Jdnl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAJdHAAwQA JdHCAwQAJdHEAwQAJdHGMA0GCSqGSIb3DQEBCwUAA4IBAQAlKw1RMSEXkrI/pbXB mqx5bdSdpRAUUOgCbbC0Y7NhVP+kXiIeFjJI/8bG7Wk/0/zUx8PqKY2j6a66HrB1 uPLcdaPpRxWs9F7VORALHYgv7sf7JlJJ5R2O11lEnE7Ij8Db9eSgMBxbZKonAWhK erx+QWw5DHrxk/FIkh+0+L33U5wIijaBBgq8MMkoE2oLgKdbwweQySSVIThSJJFF ihVBtISHg0B0Gvld97nGsNOsTU70+GpUMpg71R7PLjDsALIiLmIM3pjr9HyO+N7W DePEMaCnyBe/x1RxO7gHNz33I1Ur5fftgfFBbCbLyl9HbK+DF+V+deEnlExTk9aE Jyqm -----END CERTIFICATE-----Generated at Sun Jan 25 15:07:06 2026 by rpki-client